| 🛡️ Admin accounts are not used for daily operations🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Diagnostic Setting captures Administrative, Alert, Policy, and Security categories🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Diagnostic Setting exists for Subscription Activity Logs🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Diagnostic Setting for Azure AppService HTTP logs is not enabled🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Diagnostic Setting for Azure Key Vault is not enabled🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Diagnostic Setting is not enabled for all services that support it🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Diagnostic Setting Logs export to Storage Account not encrypted with Customer-managed key🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Intune logs are not captured and sent to Log Analytics🟢⚪ | | 🟢 x2, ⚪ x1 | no data |